This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e372e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e372e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          4glP3nJ3NX77ktjg2y2RR3TxH9/C6V/PrdpAQCSBX34=
Subject key identifier:   C5:C5:D8:6E:35:AA:0B:9F:71:44:C8:D0:7B:45:9C:E6:78:A2:14:C1
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       68584EA5B662914DE3DDD957F801C083C69781DA
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e372e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 06 Jan 2026 20:54:34 +0000
ROA not before:           Tue 06 Jan 2026 20:49:34 +0000
ROA not after:            Tue 05 Jan 2027 20:54:34 +0000
asID:                     4995
IP address blocks:        200.29.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Jan 2026 00:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:58:4e:a5:b6:62:91:4d:e3:dd:d9:57:f8:01:c0:83:c6:97:81:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Jan  6 20:49:34 2026 GMT
            Not After : Jan  5 20:54:34 2027 GMT
        Subject: CN=C5C5D86E35AA0B9F7144C8D07B459CE678A214C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:a3:42:8b:ab:20:64:23:48:ef:3e:80:3a:
                    dd:6f:bd:e1:90:88:a8:2c:33:d9:05:ce:e5:1a:93:
                    54:36:a8:d2:06:e4:73:d5:10:dd:ab:68:c7:d4:50:
                    ab:74:be:46:38:c6:e3:d9:87:be:f0:38:f0:92:d4:
                    b5:dd:2d:8b:ff:4a:ab:87:e4:35:dc:8b:74:97:81:
                    55:4f:70:7c:8a:e0:2e:b3:c6:30:d5:67:e3:48:14:
                    bc:55:dd:8c:9e:b4:f7:ca:42:ae:ab:20:13:bb:17:
                    44:34:67:5d:ab:bc:fa:a2:18:1a:2e:e3:20:fe:61:
                    70:7d:48:51:a2:87:6a:dd:a2:a9:57:47:ba:39:d6:
                    64:4d:62:40:08:a9:ef:b1:1e:e3:fd:ff:26:c9:55:
                    6f:30:e2:ab:a5:10:54:84:45:95:b7:54:a1:c5:b5:
                    26:4f:c1:07:99:cd:66:30:e9:e7:4e:b2:e8:9b:4a:
                    ea:9b:7e:6f:69:bb:77:6e:63:9b:8e:f1:f0:3a:61:
                    9d:67:5f:55:e5:15:43:b8:64:11:00:31:0d:8c:72:
                    8d:ef:3d:89:84:20:63:db:4e:8c:96:2f:89:d3:85:
                    3a:4f:00:54:09:0e:57:f1:49:ea:00:bf:33:c0:45:
                    64:24:23:01:d7:07:63:bd:8d:be:03:8d:7a:8d:b8:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:D8:6E:35:AA:0B:9F:71:44:C8:D0:7B:45:9C:E6:78:A2:14:C1
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e372e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:cf:c5:6f:f2:5b:a5:12:70:48:ea:73:e2:10:aa:ad:7e:
         9d:93:dc:09:b1:e1:b8:e3:6f:b3:56:f3:5f:54:16:e1:a5:64:
         bf:ca:6b:ad:32:35:a6:f4:5c:f6:88:9d:27:35:07:a2:b5:a5:
         66:48:7f:82:4e:36:d2:04:cd:dc:ad:14:10:7c:31:3b:c2:fe:
         da:51:65:71:46:e9:7f:cf:9b:8a:47:d8:df:97:d8:6b:70:7f:
         2b:59:56:d3:5e:98:e1:89:79:49:3d:ed:41:80:fa:d8:b3:8c:
         cd:17:8d:50:20:76:58:3a:06:75:cd:ff:5d:eb:07:09:1c:78:
         3c:48:56:9c:dc:b4:25:4e:88:c8:65:d0:67:dd:57:78:7f:39:
         56:89:41:f0:df:9b:46:33:95:c6:7b:90:16:67:d2:85:b1:0f:
         fa:3d:87:8d:37:f8:db:4e:6e:46:5d:d1:60:72:19:af:8f:15:
         b2:46:bd:b1:87:7d:e1:44:cc:1a:13:7d:80:48:ca:67:12:df:
         96:99:6e:5e:6f:57:20:12:b5:fc:76:38:57:ba:de:4d:09:0b:
         e6:68:ed:42:5f:84:87:eb:8e:79:f2:fd:53:c2:3c:1e:16:94:
         68:c3:82:d8:f3:e7:23:cf:35:e6:0b:4a:3a:4a:d6:2b:ac:11:
         16:96:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 11:06:09 2026 by rpki-client